undefined | Better HN

0 pointsgroestl2y ago0 comments

For me it's now Debian on the server (debs) and Arch on the desktop (rolling releases, AURs).

0 comments

Who controls quality and security in the AUR world? It doesn't seem like something I'd want to trust?

the AUR is user supported, no claims are made, but AURs are built off of short scripts called PKGBUILDs so it's easy to audit, you're gonna want to look for the line that links to a tar archive or git repository.

groestlOP2y ago

Nobody, but the specs are so simple you can audit them yourself usually. For me it's mostly about low friction packaging my own software tbh.

j / k navigate · click thread line to collapse

0 comments

wankle2y ago

Who controls quality and security in the AUR world? It doesn't seem like something I'd want to trust?

calvinmorrison2y ago

groestlOP2y ago

Nobody, but the specs are so simple you can audit them yourself usually. For me it's mostly about low friction packaging my own software tbh.

j / k navigate · click thread line to collapse